|
Werbung trotz Addblocker Plus. Funktioniert nicht. Hallo, ich habe seid wenigen Tagen Werbung bei GMX und Google, sprich diese sickert trotz Addblocker Plus durch. Andere Addblocker habe ich versucht hinzuzufügen in CHrome. Jedoch kommt die Meldung. "Es ist ein Fehler aufgetreten" Habe mich auch an und abgemeldet. Nun habe ich hier bei ähnlichem Thema gelesen, dass man mit Farbar's Recovery Scan Tool scannen sollte. Die habe ich getan und das ist rausgekommen: (vl. kann mir jemand helfen, wie ich das system generell verbessern kann): FRST Logfile: FRST Logfile: [CODE]Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-01-2014 03 Ran by artpc (administrator) on ARTPC-PC on 16-01-2014 14:59:24 Running from C:\Documents Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard Internet Explorer Version 7 Boot Mode: Normal ==================== Processes (Whitelisted) =================== (IObit) C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (AudioVkontakte.ru) C:\ProgramData\VKSaver\VKSaver.exe (ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe () C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWBaseUpdaterService\2\FSCWBaseUpdaterService.exe (pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe (pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe (GGS) C:\Users\artpc.artpc-PC\AppData\Local\THORN\Thorn.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (BullGuard Ltd.) C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe (IObit) C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe () C:\ProgramData\OptimizerPro\OptimizerPro.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Realtek Semiconductor) C:\Windows\RtHDVCpl.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (AudioVkontakte.ru) C:\ProgramData\VKSaver\VKSaver.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\ehome\ehtray.exe (IObit) C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\ehome\ehmsas.exe (Microsoft Corporation) C:\Windows\System32\sdclt.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\conime.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [6139904 2008-05-08] (Realtek Semiconductor) HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [BullGuard] - C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe [2074424 2013-04-01] (BullGuard Ltd.) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [VKSaver] - C:\ProgramData\VKSaver\VKSaver.exe [224768 2012-12-25] (AudioVkontakte.ru) HKLM\...\Run: [PowerManager] - c:\program files\power manager\pm.exe [1716224 2008-09-25] () HKLM\...\Run: [Google EULA Launcher] - c:\program files\google\google eula\googleeulalauncher.exe [20480 2008-05-28] ( ) HKLM\...\Run: [TkBellExe] - C:\Program Files\Real\RealPlayer\update\realsched.exe [295512 2013-09-12] (RealNetworks, Inc.) HKCU\...\Run: [Google Update] - C:\Users\artpc.artpc-PC\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-03-27] (Google Inc.) HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation) HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation) HKCU\...\Run: [Spotify Web Helper] - C:\Users\artpc.artpc-PC\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-19] (Spotify Ltd) HKCU\...\Run: [Advanced SystemCare 5] - C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe [574296 2012-03-06] (IObit) HKCU\...\Policies\Explorer: [NoInstrumentation] 1 MountPoints2: {0fba91ea-9ead-11e2-bf22-c8529e82fa0a} - H:\LGAutoRun.exe MountPoints2: {71232dde-fcf2-11e2-b800-b11a8659bce7} - H:\LGAutoRun.exe MountPoints2: {a932f1d6-b261-11e2-b29c-e784838dda10} - H:\LGAutoRun.exe HKU\Art\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\Art\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [ 2008-01-21] (Microsoft Corporation) HKU\Art\...\Run: [Advanced SystemCare 5] - C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe [ 2012-03-06] (IObit) HKU\Art\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [ 2008-01-21] (Microsoft Corporation) HKU\Art\...\Run: [Spotify Web Helper] - C:\Users\artpc.artpc-PC\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [ 2013-10-19] (Spotify Ltd) HKU\Art\...\Run: [Driver Detective] - C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe /applicationMode:systemTray /showWelcome:false HKU\Art\...\Run: [Google Update] - C:\Users\artpc.artpc-PC\AppData\Local\Google\Update\GoogleUpdate.exe [ 2012-03-27] (Google Inc.) HKU\Art\...\Run: [PCSpeedUp] - C:\Program Files\PC Speed Up\PCSUNotifier.exe HKU\artpc\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\artpc\...\Run: [Picasa Media Detector] - C:\Program Files\Picasa2\PicasaMediaDetector.exe HKU\artpc\...\Run: [fsc-reg] - c:\fsc-reg\fscreg.exe HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\system32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation) AppInit_DLLs: c:\progra~2\vksaver\vksaver3.dll bggamingmonitor.dll bggamingmonitor.dll BgGamingMonitor.dll [ ] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yandex.ru/?win=98&clid=1992445 HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - URL hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=25448460&q={searchTerms} SearchScopes: HKLM - TopResultURLFallback hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=25448460&q={searchTerms} SearchScopes: HKLM - TopResultURL hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=25448460&q={searchTerms} SearchScopes: HKCU - DefaultScope 3F6F3209E124BA4C26377C509D8F5EEA URL = hxxp://yandex.ru/yandsearch?win=98&clid=1992446&text={searchTerms} SearchScopes: HKCU - 3F6F3209E124BA4C26377C509D8F5EEA URL = hxxp://yandex.ru/yandsearch?win=98&clid=1992446&text={searchTerms} SearchScopes: HKCU - Moikrug URL = hxxp://moikrug.ru/persons/?clid=931354&charset=utf-8&keywords={searchTerms}&submitted=1 SearchScopes: HKCU - yandex.ru-091235 URL = hxxp://search.chatzum.com/?orig=DS&affid=61&cztbid=25448460&q={searchTerms} SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear SearchScopes: HKCU - {79813DF5-0052-4742-997A-7D5E469E055A} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=902615&p={searchTerms} SearchScopes: HKCU - {B46BD4CA-CE7D-494D-89F3-026154A7E58A} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10399&src=kw&q={searchTerms}&locale=de_NL&apn_ptnrs=^ABX&apn_dtid=^YYYYYY^YY^NL&apn_uid=bbfa1368-ff22-41d4-82c9-13664f8e93d3&apn_sauid=9A32AB0A-AF58-4F1F-B0DE-3390EAEAD2BF SearchScopes: HKCU - {E88E0043-C9D4-4e33-8555-FEE4F5B63060} URL = hxxp://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: No Name - {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} - No File BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: BGAntiphishingBHO Class - {FC872B94-35E3-4B94-B028-184A2A1C7CCE} - C:\Program Files\BullGuard Ltd\BullGuard\Antiphishing\IE\BGAntiphishingIEBHO.dll (BullGuard Ltd.) BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File Toolbar: HKCU - No Name - {51A86BB3-6602-4C85-92A5-130EE4864F13} - No File Toolbar: HKCU - No Name - {09152F0B-739C-4DEC-A245-1AA8A37594F1} - No File Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Winsock: Catalog9 01 C:\Windows\system32\BGLsp.dll [150848] (BullGuard Ltd.) Winsock: Catalog9 02 C:\Windows\system32\BGLsp.dll [150848] (BullGuard Ltd.) Winsock: Catalog9 03 C:\Windows\system32\BGLsp.dll [150848] (BullGuard Ltd.) Winsock: Catalog9 04 C:\Windows\system32\BGLsp.dll [150848] (BullGuard Ltd.) Winsock: Catalog9 05 C:\Windows\system32\BGLsp.dll [150848] (BullGuard Ltd.) Winsock: Catalog9 06 C:\Windows\system32\BGLsp.dll [150848] (BullGuard Ltd.) Winsock: Catalog9 07 C:\Windows\system32\BGLsp.dll [150848] (BullGuard Ltd.) Winsock: Catalog9 08 C:\Windows\system32\BGLsp.dll [150848] (BullGuard Ltd.) Winsock: Catalog9 09 C:\Windows\system32\BGLsp.dll [150848] (BullGuard Ltd.) Winsock: Catalog9 10 C:\Windows\system32\BGLsp.dll [150848] (BullGuard Ltd.) Winsock: Catalog9 21 C:\Windows\system32\BGLsp.dll [150848] (BullGuard Ltd.) Tcpip\Parameters: [DhcpNameServer] 82.212.62.62 78.42.43.62 FireFox: ======== FF ProfilePath: C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default FF user.js: detected! => C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js FF Homepage: hxxp://www.yandex.ru/?win=98&clid=1992445 FF DefaultSearchEngine: Yandex FF SelectedSearchEngine: Yandex FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.) FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=12.0.1.633 - c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\artpc.artpc-PC\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\artpc.artpc-PC\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\askcom.xml FF SearchPlugin: C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\askcomsearch.xml FF SearchPlugin: C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\babylon.xml FF SearchPlugin: C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\delta.xml FF SearchPlugin: C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\iminent.xml FF SearchPlugin: C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\SearchTheWeb.xml FF SearchPlugin: C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-193631.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\fcmdSrchstonicde.xml FF Extension: Download and Sa - C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\50b8e6d5b3b61@50b8e6d5b3b9a.com [2012-11-30] FF Extension: Savings Sidekick - C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\crossriderapp5060@crossrider.com [2012-08-03] FF Extension: Babylon - C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\ffxtlbr@babylon.com [2012-08-03] FF Extension: incredibar.com - C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\ffxtlbr@incredibar.com [2012-08-03] FF Extension: OneClickDownloader - C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\OneClickDownload@OneClickDownload.com [2012-08-03] FF Extension: No Name - C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\staged [2012-03-21] FF Extension: Яндекс.Бар - C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\yasearch@yandex.ru [2011-06-21] FF Extension: Спутник @Mail.Ru - C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D} [2012-03-21] FF Extension: No Name - C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\{badea1ae-72ed-4f6a-8c37-4db9a4ac7bc9} [2013-09-10] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [] FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-01-08] FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-12] FF HKLM\...\Firefox\Extensions: [50b8e6d5b3b61@50b8e6d5b3b9a.com] - C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\50b8e6d5b3b61@50b8e6d5b3b9a.com FF Extension: Download and Sa - C:\Users\artpc.artpc-PC\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\50b8e6d5b3b61@50b8e6d5b3b9a.com [2012-11-30] FF HKLM\...\Firefox\Extensions: [antiphishing@bullguard] - C:\Program Files\BullGuard Ltd\BullGuard\Antiphishing\FF\antiphishing@bullguard\ FF Extension: BullGuard Antiphishing Toolbar - C:\Program Files\BullGuard Ltd\BullGuard\Antiphishing\FF\antiphishing@bullguard\ [] FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt [2013-04-26] FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [] FF HKCU\...\Thunderbird\Extensions: [{380AE6CB-09B9-4373-B360-D01C2462A6E7}] - C:\Program Files\BullGuard Ltd\BullGuard\backup\thunderbirdbkplugin FF Extension: BullGuard Backup - C:\Program Files\BullGuard Ltd\BullGuard\backup\thunderbirdbkplugin [2013-04-01] FF HKCU\...\Thunderbird\Extensions: [{0E810812-F4BB-4309-942A-755587587A5E}] - C:\Program Files\BullGuard Ltd\BullGuard\Spamfilter\TbSpamfilter FF Extension: BullGuard Spamfilter - C:\Program Files\BullGuard Ltd\BullGuard\Spamfilter\TbSpamfilter [2013-04-01] Chrome: ======= CHR Plugin: (Shockwave Flash) - C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\32.0.1700.72\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\32.0.1700.72\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\32.0.1700.72\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Java(TM) Platform SE 7 U7) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) CHR Plugin: (Google Update) - C:\Users\artpc.artpc-PC\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.) CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.70.11) - C:\Windows\system32\npDeployJava1.dll No File CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Download Plugin) - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) CHR Extension: (Adblock Plus) - C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0 [2013-12-20] CHR Extension: (RealDownloader) - C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0 [2013-09-28] CHR Extension: (Stealthy) - C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieaebnkibonmpbhdaanjkmedikadnoje\3.0.1_0 [2013-09-28] CHR Extension: (Google Wallet) - C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1 [2014-01-08] CHR HKLM\...\Chrome\Extension: [aaaajpkhjdkhhnkmgfjodbkfpbmibkkk] - C:\ProgramData\AskPartnerNetwork\Toolbar\ORJ-V7\CRX\ToolbarCR.crx [2013-12-10] CHR HKLM\...\Chrome\Extension: [bblnhhgpgomleanhbppdnkpofhjijgdp] - C:\Users\artpc.artpc-PC\AppData\Local\CRE\bblnhhgpgomleanhbppdnkpofhjijgdp.crx [2013-12-10] CHR HKLM\...\Chrome\Extension: [cgiaikfpllchefojlnehlmpekeogihnm] - C:\Users\artpc.artpc-PC\AppData\Local\CRE\cgiaikfpllchefojlnehlmpekeogihnm.crx [2013-12-10] CHR HKLM\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files\Common Files\Spigot\GC\saebay_1.0.crx [2013-12-10] CHR HKLM\...\Chrome\Extension: [hoadhbnmkdpkhaacbeegdnjoannbhdkd] - C:\ProgramData\Download and Sa\hoadhbnmkdpkhaacbeegdnjoannbhdkd.crx [2013-12-10] CHR HKLM\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files\Common Files\Spigot\GC\errorassistant_1.1.crx [2013-12-10] CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14] CHR HKLM\...\Chrome\Extension: [kfkcangbigakljkjeglcofaomihpejif] - C:\Users\artpc.artpc-PC\AppData\Local\CRE\kfkcangbigakljkjeglcofaomihpejif.crx [2012-11-28] CHR HKLM\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files\Common Files\Spigot\GC\coupons_2.4.crx [2012-11-28] CHR HKLM\...\Chrome\Extension: [naipdapbimiiikbbgjcpbgmfhnlbagpj] - C:\Users\artpc.artpc-PC\AppData\Local\CRE\naipdapbimiiikbbgjcpbgmfhnlbagpj.crx [2012-11-28] CHR HKLM\...\Chrome\Extension: [nkcpopggjcjkiicpenikeogioednjeac] - C:\Users\artpc.artpc-PC\AppData\Local\Temp\nkcpopggjcjkiicpenikeogioednjeac.crx [2012-11-28] CHR HKLM\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files\Common Files\Spigot\GC\saamazon_1.0.crx [2012-11-28] CHR HKCU\...\Chrome\Extension: [bblnhhgpgomleanhbppdnkpofhjijgdp] - C:\Users\artpc.artpc-PC\AppData\Local\CRE\bblnhhgpgomleanhbppdnkpofhjijgdp.crx [2012-11-28] CHR HKCU\...\Chrome\Extension: [cgiaikfpllchefojlnehlmpekeogihnm] - C:\Users\artpc.artpc-PC\AppData\Local\CRE\cgiaikfpllchefojlnehlmpekeogihnm.crx [2012-11-28] CHR HKCU\...\Chrome\Extension: [kfkcangbigakljkjeglcofaomihpejif] - C:\Users\artpc.artpc-PC\AppData\Local\CRE\kfkcangbigakljkjeglcofaomihpejif.crx [2012-11-28] CHR HKCU\...\Chrome\Extension: [naipdapbimiiikbbgjcpbgmfhnlbagpj] - C:\Users\artpc.artpc-PC\AppData\Local\CRE\naipdapbimiiikbbgjcpbgmfhnlbagpj.crx [2012-11-28] CHR StartMenuInternet: Google Chrome - C:\Users\artpc.artpc-PC\AppData\Local\Google\Chrome\Application\chrome.exe CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ========================== Services (Whitelisted) ================= R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 AdvancedSystemCareService5; C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe [913752 2012-03-14] (IObit) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG) S4 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-10] (APN LLC.) S3 BgRaSvc; C:\Program Files\BullGuard Ltd\BullGuard\Support\BgRaSvc.exe [122760 2013-04-01] (BullGuard Ltd.) R2 BsBrowser; C:\Program Files\BullGuard Ltd\BullGuard\BsBrowser.dll [58248 2013-04-01] (BullGuard Ltd.) R2 BsFileScan; C:\Program Files\BullGuard Ltd\BullGuard\BsFileScan.dll [272216 2013-04-01] (BullGuard Ltd.) R2 BsFire; C:\Program Files\BullGuard Ltd\BullGuard\BsFire.dll [384344 2013-04-01] (BullGuard Ltd.) R2 BsMailProxy; C:\Program Files\BullGuard Ltd\BullGuard\BsMailProxy\BsMailProxy.dll [175496 2013-04-01] (BullGuard Ltd.) R2 BsMain; C:\Program Files\BullGuard Ltd\BullGuard\BsMain.dll [171136 2013-04-01] (BullGuard Ltd.) R3 BsScanner; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe [305032 2013-04-01] (BullGuard Ltd.) R2 BsUpdate; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe [357504 2013-04-01] (BullGuard Ltd.) R2 FSCLBaseUpdaterService; C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWBaseUpdaterService\2\FSCWBaseUpdaterService.exe [65536 2007-06-04] () R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] () R2 Thorn; C:\Users\artpc.artpc-PC\AppData\Local\THORN\Thorn.exe [36664 2013-10-17] (GGS) ==================== Drivers (Whitelisted) ==================== R3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.) R1 afw; C:\Windows\System32\DRIVERS\afw.sys [29208 2013-03-28] (Agnitum Ltd.) R3 afwcore; C:\Windows\System32\DRIVERS\afwcore.sys [318488 2013-03-28] (Agnitum Ltd.) S4 ahcix86s; C:\Windows\system32\drivers\ahcix86s.sys [173576 2008-05-27] (AMD Technologies Inc.) S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [25856 2013-04-18] (Google Inc) S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag.sys [23168 2013-04-18] (LG Electronics Inc.) S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem.sys [27776 2013-06-28] (LG Electronics Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-26] (Avira Operations GmbH & Co. KG) R1 BdSpy; C:\Windows\System32\DRIVERS\BdSpy.sys [58592 2013-04-01] (BullGuard Ltd.) S4 JRAID; C:\Windows\system32\drivers\jraid.sys [76688 2008-04-03] (JMicron Technology Corp.) R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtport.sys [12160 2009-09-29] (LG Electronics Inc.) R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbus.sys [10496 2009-09-29] (LG Electronics Inc.) R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmodem.sys [12928 2009-09-29] (LG Electronics Inc.) S3 Profos; C:\Program Files\BullGuard Ltd\BullGuard\antirootkit\profos.sys [14720 2010-07-08] (BitDefender S.R.L.) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [15672 2010-11-26] () R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-24] (Avira GmbH) S3 Thetta; C:\Windows\System32\DRIVERS\Thetta32.sys [205656 2013-12-17] (Windows (R) Win 7 DDK provider) S3 Trufos; C:\Program Files\BullGuard Ltd\BullGuard\antirootkit\trufos.sys [39808 2010-07-08] (BitDefender S.R.L.) R1 WINIO; C:\Windows\system32\WinIo.sys [9336 2007-01-04] (hxxp://www.internals.com) S3 andnetndis; system32\DRIVERS\lgandnetndis.sys [x] S3 IpInIp; system32\DRIVERS\ipinip.sys [x] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x] S3 usbbus; system32\DRIVERS\lgusbbus.sys [x] S3 UsbDiag; system32\DRIVERS\lgusbdiag.sys [x] S3 USBModem; system32\DRIVERS\lgusbmodem.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-16 14:58 - 2014-01-16 14:58 - 00000000 ____D C:\FRST 2014-01-15 13:49 - 2014-01-15 13:49 - 00000000 ____D C:\ProgramData\boost_interprocess 2014-01-15 02:59 - 2014-01-16 13:41 - 00000000 ____D C:\Users\artpc.artpc-PC\AppData\Local\THORN 2014-01-15 02:58 - 2014-01-15 02:58 - 00001605 _____ C:\Users\artpc.artpc-PC\AppData\Roaming\Microsoft\Windows\Start Menu\BS.lnk 2014-01-15 02:58 - 2014-01-15 02:58 - 00001581 _____ C:\Users\artpc.artpc-PC\Desktop\BS.lnk 2014-01-14 16:40 - 2014-01-14 16:40 - 00000754 _____ C:\Users\artpc.artpc-PC\Desktop\GameNet.lnk 2014-01-14 16:40 - 2014-01-14 16:40 - 00000000 ____D C:\Program Files\GameNet 2014-01-14 16:39 - 2014-01-16 13:52 - 00000000 ____D C:\Program Files\QGNA 2014-01-14 16:39 - 2013-12-17 15:06 - 00205656 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\Thetta32.sys 2014-01-10 12:24 - 2014-01-10 12:24 - 00000368 _____ C:\Windows\PFRO.log 2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\system32\GPhotos.scr ==================== One Month Modified Files and Folders ======= 2014-01-16 14:58 - 2014-01-16 14:58 - 00000000 ____D C:\FRST 2014-01-16 14:58 - 2006-11-02 13:47 - 00003344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-16 14:58 - 2006-11-02 13:47 - 00003344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-16 14:51 - 2013-09-21 18:42 - 00000392 ____H C:\Windows\Tasks\User_Feed_Synchronization-{F28FB0E6-C1A5-46AB-97DA-C5159556C201}.job 2014-01-16 14:46 - 2012-05-27 15:23 - 00000996 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1947843536-1629178341-672044078-1000UA.job 2014-01-16 14:44 - 2013-03-28 21:52 - 00057688 _____ C:\Windows\system32\config\afw_hm.conf 2014-01-16 14:44 - 2013-03-28 21:52 - 00000004 _____ C:\Windows\system32\config\afw_db.conf 2014-01-16 14:17 - 2012-04-23 14:01 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-16 13:55 - 2010-03-15 15:56 - 01136564 _____ C:\Windows\WindowsUpdate.log 2014-01-16 13:53 - 2013-03-28 20:56 - 00000000 ____D C:\ProgramData\BullGuard 2014-01-16 13:52 - 2014-01-14 16:39 - 00000000 ____D C:\Program Files\QGNA 2014-01-16 13:48 - 2012-08-03 00:07 - 00000374 ____H C:\Windows\Tasks\OptimizerProUpdaterTask{9B360689-EE64-4AB1-941E-48EE2C16979C}.job 2014-01-16 13:41 - 2014-01-15 02:59 - 00000000 ____D C:\Users\artpc.artpc-PC\AppData\Local\THORN 2014-01-16 13:40 - 2011-05-31 00:04 - 00065536 _____ C:\Windows\system32\Ikeext.etl 2014-01-16 13:40 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-16 03:46 - 2006-11-02 14:01 - 00032514 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-16 03:15 - 2008-08-14 03:01 - 00000000 ____D C:\ProgramData\Microsoft Help 2014-01-16 03:12 - 2013-08-15 14:26 - 00000000 ____D C:\Windows\system32\MRT 2014-01-16 03:04 - 2006-11-02 11:24 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-01-16 01:19 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\tracing 2014-01-15 19:46 - 2012-05-27 15:23 - 00000944 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1947843536-1629178341-672044078-1000Core.job 2014-01-15 13:49 - 2014-01-15 13:49 - 00000000 ____D C:\ProgramData\boost_interprocess 2014-01-15 02:58 - 2014-01-15 02:58 - 00001605 _____ C:\Users\artpc.artpc-PC\AppData\Roaming\Microsoft\Windows\Start Menu\BS.lnk 2014-01-15 02:58 - 2014-01-15 02:58 - 00001581 _____ C:\Users\artpc.artpc-PC\Desktop\BS.lnk 2014-01-14 18:00 - 2013-03-19 14:55 - 00000440 _____ C:\Windows\Tasks\SpeedMaxPc Registration3.job 2014-01-14 16:40 - 2014-01-14 16:40 - 00000754 _____ C:\Users\artpc.artpc-PC\Desktop\GameNet.lnk 2014-01-14 16:40 - 2014-01-14 16:40 - 00000000 ____D C:\Program Files\GameNet 2014-01-13 21:39 - 2008-01-21 08:16 - 01445546 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-12 12:57 - 2013-05-01 20:11 - 00000000 ____D C:\Users\artpc.artpc-PC\AppData\Roaming\LG Electronics 2014-01-10 12:24 - 2014-01-10 12:24 - 00000368 _____ C:\Windows\PFRO.log 2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\system32\GPhotos.scr 2013-12-24 02:30 - 2013-03-19 14:55 - 00000398 _____ C:\Windows\Tasks\SpeedMaxPc Update3.job 2013-12-22 21:06 - 2013-02-08 02:49 - 00000000 ____D C:\Users\artpc.artpc-PC\AppData\Roaming\Spotify 2013-12-22 20:43 - 2013-02-08 02:49 - 00000000 ____D C:\Users\artpc.artpc-PC\AppData\Local\Spotify 2013-12-18 16:31 - 2013-02-24 00:49 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-12-18 16:31 - 2013-02-24 00:49 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-17 22:43 - 2011-09-10 23:33 - 00000000 ____D C:\ProgramData\IObit 2013-12-17 15:06 - 2014-01-14 16:39 - 00205656 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\Thetta32.sys Some content of TEMP: ==================== C:\Users\artpc.artpc-PC\AppData\Local\Temp\avgnt.exe C:\Users\artpc.artpc-PC\AppData\Local\Temp\setup23156.exe C:\Users\artpc.artpc-PC\AppData\Local\Temp\setup28070.exe C:\Users\artpc.artpc-PC\AppData\Local\Temp\setup8773.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit oder auch noch was anderes auch mit FRST, kenne mich leider nicht aus aber vl. sagt es was?:FRST Additions Logfile: Code: Additional scan result of Farbar Recovery Scan Tool (x86) Version: 15-01-2014 03--- --- --- --- --- --- könnte ihr vl mitteilen ob es gefährlich sein könnte wenn man so ein scann postet? Danke im Voraus. Gruß |
hi,  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte. |
Danke für die Antwort. zum ANfang, was sind die logfiles? wie gesagt kenne mich nicht so aus.. wo soll ich die anhängen? und warum vorher in ein ZIP, RAR, 7Z-Archive zu packen? Gruss Zitat:
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke . Setze den Curser zwischen die CODE-Tags und drücke STRG+V. Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten. |
Genauer kann man das eigentlich nicht erklären, is Schritt für Schritt. Was genau verstehst Du nicht oder wo hängst Du? dann kann ich erklären :) |
Also: Posten in CODE-Tags:- Was posten? in welche code Tags? Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit: was sind logfiles? warum wollen Sie es in ZIP packen? es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor: welche logfiles genau soll ich markieren? Ich habe zwei Abschnitte gepostet.. Klicke im Editor auf das #-Symbol: genauer bitte, in welche Editor, habe gegoogelt, verstehe nicht, sorry für die Umstände. Malwarebytes Anti-Malware habe ich installiert und durchlaufen lassen.. Funde entfernt. Hier sind zwei Berichte: 1:2014/01/16 21:27:07 +0100 ARTPC-PC artpc MESSAGE Executing scheduled update: Daily 2014/01/16 21:27:18 +0100 ARTPC-PC artpc MESSAGE Starting protection 2014/01/16 21:27:18 +0100 ARTPC-PC artpc MESSAGE Protection started successfully 2014/01/16 21:27:18 +0100 ARTPC-PC artpc MESSAGE Starting IP protection 2014/01/16 21:27:41 +0100 ARTPC-PC artpc MESSAGE Scheduled update executed successfully: database updated from version v2013.04.04.07 to version v2014.01.16.06 2014/01/16 21:27:41 +0100 ARTPC-PC artpc MESSAGE IP Protection started successfully 2014/01/16 21:27:41 +0100 ARTPC-PC artpc MESSAGE Starting database refresh 2014/01/16 21:27:41 +0100 ARTPC-PC artpc MESSAGE Stopping IP protection 2014/01/16 21:27:42 +0100 ARTPC-PC artpc MESSAGE IP Protection stopped successfully 2014/01/16 21:27:47 +0100 ARTPC-PC artpc MESSAGE Database refreshed successfully 2014/01/16 21:27:47 +0100 ARTPC-PC artpc MESSAGE Starting IP protection 2014/01/16 21:27:55 +0100 ARTPC-PC artpc MESSAGE IP Protection started successfully 2014/01/16 23:04:57 +0100 ARTPC-PC artpc IP-BLOCK 78.140.143.48 (Type: outgoing, Port: 63798, Process: chrome.exe) 2014/01/16 23:06:59 +0100 ARTPC-PC artpc IP-BLOCK 78.140.163.135 (Type: outgoing, Port: 63976, Process: chrome.exe) 2014/01/16 23:48:15 +0100 ARTPC-PC artpc DETECTION C:\ProgramData\OptimizerPro\OptimizerPro.exe Trojan.Dropper QUARANTINE 2014/01/16 23:48:16 +0100 ARTPC-PC artpc ERROR Quarantine failed: DeleteFile failed with error code 5 2: 2014/01/17 01:29:16 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50058, Process: chrome.exe) 2014/01/17 01:29:18 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50059, Process: chrome.exe) 2014/01/17 01:29:18 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50060, Process: chrome.exe) 2014/01/17 01:29:18 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50061, Process: chrome.exe) 2014/01/17 01:29:18 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50062, Process: chrome.exe) 2014/01/17 01:29:18 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50063, Process: chrome.exe) 2014/01/17 01:29:26 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50118, Process: chrome.exe) 2014/01/17 01:29:35 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50127, Process: chrome.exe) 2014/01/17 01:30:25 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50159, Process: chrome.exe) 2014/01/17 01:30:25 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50160, Process: chrome.exe) 2014/01/17 01:30:25 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50161, Process: chrome.exe) 2014/01/17 01:30:25 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50166, Process: chrome.exe) 2014/01/17 01:38:23 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50231, Process: chrome.exe) 2014/01/17 01:38:23 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 50232, Process: chrome.exe) 2014/01/17 03:51:44 +0100 ARTPC-PC artpc IP-BLOCK 78.140.163.135 (Type: outgoing, Port: 52290, Process: chrome.exe) 2014/01/17 03:52:41 +0100 ARTPC-PC artpc IP-BLOCK 88.85.70.189 (Type: outgoing, Port: 52357, Process: chrome.exe) 2014/01/17 03:52:42 +0100 ARTPC-PC artpc IP-BLOCK 78.140.163.135 (Type: outgoing, Port: 52404, Process: chrome.exe) 2014/01/17 03:53:47 +0100 ARTPC-PC artpc IP-BLOCK 78.140.143.48 (Type: outgoing, Port: 52421, Process: chrome.exe) 2014/01/17 03:53:47 +0100 ARTPC-PC artpc IP-BLOCK 78.140.143.48 (Type: outgoing, Port: 52422, Process: chrome.exe) 2014/01/17 03:53:47 +0100 ARTPC-PC artpc IP-BLOCK 78.140.143.48 (Type: outgoing, Port: 52440, Process: chrome.exe) 2014/01/17 03:54:35 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 52548, Process: chrome.exe) 2014/01/17 03:54:35 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 52605, Process: chrome.exe) 2014/01/17 03:54:35 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 52611, Process: chrome.exe) 2014/01/17 03:54:35 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 52612, Process: chrome.exe) 2014/01/17 03:54:35 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 52613, Process: chrome.exe) 2014/01/17 03:54:35 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 52616, Process: chrome.exe) 2014/01/17 03:54:35 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 52618, Process: chrome.exe) 2014/01/17 03:54:43 +0100 ARTPC-PC artpc IP-BLOCK 88.208.33.4 (Type: outgoing, Port: 52687, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52704, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52705, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52706, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52713, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52714, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52715, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52716, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52717, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52718, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52720, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52721, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52722, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52723, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52724, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52725, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52726, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52728, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52729, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52730, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52731, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52733, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52734, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52735, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52736, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52737, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52738, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52740, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52742, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52743, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52744, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52745, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52746, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52747, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52748, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52749, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52750, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52751, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52752, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52753, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52755, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52756, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52757, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52758, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52760, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52761, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52762, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52763, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52764, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52766, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52767, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52768, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52769, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52770, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52771, Process: chrome.exe) 2014/01/17 03:55:00 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52772, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52773, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52775, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52776, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52777, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52778, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52779, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52780, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52781, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52782, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52783, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52784, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52785, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52789, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52790, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52791, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52792, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52793, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52794, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52795, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52796, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52797, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52798, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52799, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52800, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52801, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52802, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52803, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52804, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52805, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52806, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52807, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52808, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52809, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52810, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52811, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52812, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52813, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52814, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52815, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52816, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52817, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52818, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52819, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52820, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52821, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52822, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52823, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52824, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52825, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52826, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52827, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52828, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52829, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52830, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52831, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52832, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52833, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52834, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52835, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52836, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52837, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52838, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52839, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52840, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52841, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52842, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52843, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52844, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52845, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52846, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52847, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52848, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52849, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52850, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52851, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52858, Process: chrome.exe) 2014/01/17 03:55:01 +0100 ARTPC-PC artpc IP-BLOCK 78.140.142.55 (Type: outgoing, Port: 52860, Process: chrome.exe) 2014/01/17 04:09:59 +0100 ARTPC-PC (null) MESSAGE Starting protection 2014/01/17 04:09:59 +0100 ARTPC-PC (null) MESSAGE Protection started successfully 2014/01/17 04:09:59 +0100 ARTPC-PC (null) MESSAGE Starting IP protection 2014/01/17 04:10:06 +0100 ARTPC-PC (null) MESSAGE IP Protection started successfully 2014/01/17 13:42:50 +0100 ARTPC-PC (null) MESSAGE Executing scheduled update: Daily 2014/01/17 13:42:57 +0100 ARTPC-PC (null) MESSAGE Starting protection 2014/01/17 13:42:57 +0100 ARTPC-PC (null) MESSAGE Protection started successfully 2014/01/17 13:42:57 +0100 ARTPC-PC (null) MESSAGE Starting IP protection 2014/01/17 13:43:01 +0100 ARTPC-PC (null) MESSAGE Scheduled update executed successfully: database updated from version v2014.01.16.06 to version v2014.01.17.03 2014/01/17 13:43:08 +0100 ARTPC-PC (null) MESSAGE IP Protection started successfully 2014/01/17 13:43:08 +0100 ARTPC-PC (null) MESSAGE Starting database refresh 2014/01/17 13:43:08 +0100 ARTPC-PC (null) MESSAGE Stopping IP protection 2014/01/17 13:43:08 +0100 ARTPC-PC (null) MESSAGE IP Protection stopped successfully 2014/01/17 13:43:13 +0100 ARTPC-PC (null) MESSAGE Database refreshed successfully 2014/01/17 13:43:13 +0100 ARTPC-PC (null) MESSAGE Starting IP protection 2014/01/17 13:43:22 +0100 ARTPC-PC artpc MESSAGE IP Protection started successfully 2014/01/17 14:47:57 +0100 ARTPC-PC (null) MESSAGE Starting protection 2014/01/17 14:47:57 +0100 ARTPC-PC (null) MESSAGE Protection started successfully 2014/01/17 14:47:58 +0100 ARTPC-PC (null) MESSAGE Starting IP protection 2014/01/17 14:48:04 +0100 ARTPC-PC (null) MESSAGE IP Protection started successfully Das von ADW cleaner poste ich noch. Danke schonmal. Textdatei von Adwcleaner:AdwCleaner Logfile: Code: # AdwCleaner v3.017 - Bericht erstellt am 17/01/2014 um 19:08:38Ich würde gerne wissen ob durch Veröffenlichung d. Daten irgendwelche Riseken gibt. Gruss Ich würde noch gerne wissen ob es bei der Veröffentlichung der Daten irgendwelche Risiken gibt. Gruss Inhalt von Junkware Removal Tool: ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{AD79BAD6-9504-4F09-ACEC-7B319584A4C1} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\caphyon Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{B46BD4CA-CE7D-494D-89F3-026154A7E58A} ~~~ Files Successfully deleted: [File] "C:\Users\artpc.artpc-PC\appdata\locallow\SkwConfig.bin" ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\apn" Successfully deleted: [Folder] "C:\ProgramData\fighters" Successfully deleted: [Folder] "C:\ProgramData\optimizerpro" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\AppData\Roaming\drivercure" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\AppData\Roaming\dvdvideosoftiehelpers" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\AppData\Roaming\getrighttogo" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\AppData\Roaming\pccustubinstaller" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\AppData\Roaming\pdfforge" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\AppData\Roaming\simplitec" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\AppData\Roaming\speedmaxpc" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\appdata\local\apn" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\appdata\local\conduit" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\appdata\local\cre" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\appdata\locallow\babylontoolbar" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\appdata\locallow\boost_interprocess" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\appdata\locallow\conduit" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\appdata\locallow\facemoods.com" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\appdata\locallow\incredibar.com" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\appdata\locallow\pricegong" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\appdata\locallow\search settings" Successfully deleted: [Folder] "C:\Users\artpc.artpc-PC\appdata\locallow\surfcanyon" ~~~ FireFox Successfully deleted: [File] C:\Users\artpc.artpc-PC\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\user.js Successfully deleted: [File] C:\Users\artpc.artpc-PC\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\searchplugins\askcom.xml Successfully deleted: [File] C:\Users\artpc.artpc-PC\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\searchplugins\askcomsearch.xml Successfully deleted: [File] C:\Users\artpc.artpc-PC\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\searchplugins\babylon.xml Successfully deleted: [File] C:\Users\artpc.artpc-PC\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\searchplugins\delta.xml Successfully deleted: [File] C:\Users\artpc.artpc-PC\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\searchplugins\searchtheweb.xml Successfully deleted: [Folder] C:\Users\artpc.artpc-PC\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\extensions\ffxtlbr@babylon.com Successfully deleted: [Folder] C:\Users\artpc.artpc-PC\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\extensions\crossriderapp5060@crossrider.com Successfully deleted: [Folder] C:\Users\artpc.artpc-PC\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\extensions\ffxtlbr@incredibar.com Successfully deleted: [Folder] C:\Users\artpc.artpc-PC\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\extensions\oneclickdownload@oneclickdownload.com Successfully deleted: [Folder] C:\Users\artpc.artpc-PC\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\extensions\staged Successfully deleted the following from C:\Users\artpc.artpc-PC\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\prefs.js user_pref("extensions.asktb.ff-original-keyword-url", ""); ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 17.01.2014 at 20:31:52,59 Computer was rebooted End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Und was ist ein FRST? Noch eine Frage. Ich habe die Click&Clean App installiert. Dann habe "persönlich Daten löschen" durchgeführt. Seid dem kann ich keine "minimierte" Fenster öffnen. Bzw. gibt es ja im Email Posteingang bei GMX rechts ein kleinen Quadrat, so lässt sich eine Email in eine extra Fenster öffnen. Nun funktioniert es nicht mehr und emails können nur in einem Fenster geöffnet werden. Woran liegt es. Wäre super wenn Sie einen Rat hätten. Gruß |
Da sind keine sensiblen Daten drin in den Logfiles. Du hast die Logs jetzt einfach so gepostet. Folge doch enfach der Anleitung zum Posten in Codetags, und pack jedes Logfile zwischen das Code und /Code. Zitat:
ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? :) |
Haben den die bisherigen lofiles was gebracht? hier die von SecurityCheck: Results of screen317's Security Check version 0.99.79 Windows Vista Service Pack 2 x86 (UAC is enabled) Internet Explorer 7 Out of date! ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop BullGuard Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 CCleaner Java 7 Update 45 Java version out of Date! Adobe Flash Player 11.9.900.170 Adobe Reader 9 Adobe Reader out of Date! Adobe Reader 10.1.9 Adobe Reader out of Date! Google Chrome 32.0.1700.72 Google Chrome 32.0.1700.76 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` ich würde noch gerne wissen, ob man den Ordner "Neurecht" mit DLL und dil Dataien löschen kann? |
Was für ein Ordner? Wo ist der? Schau doch mal in die Logs was wir alles gelöscht haben. Tonnen an Material. Java, Adobe und unbedingt Windows updaten. Frisches FRST log fehlt. Noch Probleme? |
hier das aktuelle FRST: FRST Logfile: FRST Logfile: FRST Logfile: Code: Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-01-2014--- --- --- --- --- --- C:\Programme\Eset\EsetOnlineScanner\log.txt leider nicht zu finden! Nur esetsmartinstaller_deu.exe -dann wird ja das Programm erneut durchlaufen.. ich weiss nicht genau wie die anwendung heisst cp oder sowas. jedenfalls schlegen die zeiger von 14 bis 90 aus. kann man da was machen? |
Zitat:
|
| Alle Zeitangaben in WEZ +1. Es ist jetzt 13:09 Uhr. |
Copyright ©2000-2025, Trojaner-Board
